# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1875 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1876 --- ## [Not able to join a node in cluster](https://discuss.elastic.co/t/not-able-to-join-a-node-in-cluster/106966)
**Author:** [@rangitgaddam](https://discuss.elastic.co/u/rangitgaddam)\ **Replies:** 14\ **Last updated:** [November 27, 2017, 9:54pm UTC](https://discuss.elastic.co/t/not-able-to-join-a-node-in-cluster/106966 "2017-11-27T21:54:55Z")
Hi i am not able to join simple data node(running in another server) to existing cluster(master running in another server) with in a network please check my config files below elasticserach.yml(for master node) cluste… --- ## [ES 5.4 =\> 6.0 Upgrade. Watcher Issues](https://discuss.elastic.co/t/es-5-4-6-0-upgrade-watcher-issues/108481)
**Author:** [@aballman](https://discuss.elastic.co/u/aballman)\ **Replies:** 3\ **Last updated:** [November 27, 2017, 9:21pm UTC](https://discuss.elastic.co/t/es-5-4-6-0-upgrade-watcher-issues/108481 "2017-11-27T21:21:39Z")
I have upgrade ES from 5.4 to 6.0, including Kibana and all the plugins we have installed. They are discovery-ec2, repository-s3, and x-pack. I followed the upgrade instructions as listed here: https://www.elastic.co/gui… --- ## [Should have hits, got nothing](https://discuss.elastic.co/t/should-have-hits-got-nothing/109236)
**Author:** [@Sylvain\_Attoumani](https://discuss.elastic.co/u/Sylvain_Attoumani)\ **Replies:** 1\ **Last updated:** [November 27, 2017, 8:25pm UTC](https://discuss.elastic.co/t/should-have-hits-got-nothing/109236 "2017-11-27T20:25:41Z")
Hello everyone, I'm working with elasticsearch in php. I have indexed 'ps\_product' and when I'm going in localhost:9200/sky/ps\_product/39 I have the following result : "\_index": "sky", "\_type": "ps\_product", "\_id": "39"… --- ## [Providing array in bool should instead of multiple queries](https://discuss.elastic.co/t/providing-array-in-bool-should-instead-of-multiple-queries/109252)
**Author:** [@jalaj](https://discuss.elastic.co/u/jalaj)\ **Replies:** 1\ **Last updated:** [November 27, 2017, 7:20pm UTC](https://discuss.elastic.co/t/providing-array-in-bool-should-instead-of-multiple-queries/109252 "2017-11-27T19:20:56Z")
{ "bool": { "should": \[{ "match": { "uid": "A" } }, { "match": { "uid": "B" } }\] } } Can I provide a list of A,B,C... instead of multiple match sub- queries ? --- ## [Bin elasticsearch-env file - possible bug?](https://discuss.elastic.co/t/bin-elasticsearch-env-file-possible-bug/109266)
**Author:** [@morphers82](https://discuss.elastic.co/u/morphers82)\ **Replies:** 1\ **Last updated:** [November 27, 2017, 6:36pm UTC](https://discuss.elastic.co/t/bin-elasticsearch-env-file-possible-bug/109266 "2017-11-27T18:36:26Z")
I've only been able to run 2-6.0 ES nodes on a single server by manually editing the /usr/share/elasticsearch/bin/elasticsearch-env file before running the seperately configured elasticsearch.service files (ie running sy… --- ## [Best practise for index creation](https://discuss.elastic.co/t/best-practise-for-index-creation/109096)
**Author:** [@Souciance\_Eqdam\_Rash](https://discuss.elastic.co/u/Souciance_Eqdam_Rash)\ **Replies:** 14\ **Last updated:** [November 27, 2017, 6:24pm UTC](https://discuss.elastic.co/t/best-practise-for-index-creation/109096 "2017-11-27T18:24:17Z")
Hi, We are just starting out with elasticsearch for centralized logging. Our backend is an integration platform that has say 100 integrations currently running. My question has to do with index creation. What is the be… --- ## [Where to set ElasticSearch request timeout?](https://discuss.elastic.co/t/where-to-set-elasticsearch-request-timeout/108732)
**Author:** [@imranazad](https://discuss.elastic.co/u/imranazad)\ **Replies:** 1\ **Last updated:** [November 27, 2017, 6:10pm UTC](https://discuss.elastic.co/t/where-to-set-elasticsearch-request-timeout/108732 "2017-11-27T18:10:10Z")
I've looked everywhere including the documentation regarding where I can set the request timeout for elasticsearch without much luck. In Visual Studio the intelliSense label for the property 'requestTimeout' states \`Not… --- ## [Error inserting data](https://discuss.elastic.co/t/error-inserting-data/108707)
**Author:** [@ericrichter](https://discuss.elastic.co/u/ericrichter)\ **Replies:** 6\ **Last updated:** [November 27, 2017, 5:32pm UTC](https://discuss.elastic.co/t/error-inserting-data/108707 "2017-11-27T17:32:48Z")
Since the upgrade to 6.0.0, we see this error: java.lang.IllegalArgumentException: Rejecting mapping update to \[logstash-2017.11.22\] as the final mapping would have more than 1 type: \[logfile, syslog\] Is "type" een res… --- ## [Find & Separately Store Array Duplicates](https://discuss.elastic.co/t/find-separately-store-array-duplicates/108175)
**Author:** [@kbarresi](https://discuss.elastic.co/u/kbarresi)\ **Replies:** 4\ **Last updated:** [November 27, 2017, 5:16pm UTC](https://discuss.elastic.co/t/find-separately-store-array-duplicates/108175 "2017-11-27T17:16:10Z")
Hello, I have a large set of documents, each with an item\_ids array of integers, like such: { "item\_ids" : \[ 1, 2, 3, 3, 4 5, 5 \] } What I would like to do is filter a search by finding documents where the same ite… --- ## [Painless - Getting Field with whitespace Character](https://discuss.elastic.co/t/painless-getting-field-with-whitespace-character/109223)
**Author:** [@dcam](https://discuss.elastic.co/u/dcam)\ **Replies:** 2\ **Last updated:** [November 27, 2017, 5:01pm UTC](https://discuss.elastic.co/t/painless-getting-field-with-whitespace-character/109223 "2017-11-27T17:01:01Z")
I have a field with Whitespace character: i.e 'Error Message.keyword' How can I get this field with painless? 1 ) ctx.payload.buckets\[0\].'Error Message.keyword' 2 ) def error='Error Message.keyword'; ctx.payload.bucke… --- ## [How to "merge" same name indices](https://discuss.elastic.co/t/how-to-merge-same-name-indices/107993)
**Author:** [@kevinray0030](https://discuss.elastic.co/u/kevinray0030)\ **Replies:** 4\ **Last updated:** [November 27, 2017, 4:35pm UTC](https://discuss.elastic.co/t/how-to-merge-same-name-indices/107993 "2017-11-27T16:35:43Z")
Hello all, I am running into an issue where I am receiving the following error: can not be imported as a dangling index, as index with same name already exists in cluster metadata I know that I am getting this error b… --- ## [Problem installing x-pack on Centos 7 virtual box vm](https://discuss.elastic.co/t/problem-installing-x-pack-on-centos-7-virtual-box-vm/109165)
**Author:** [@echeadle](https://discuss.elastic.co/u/echeadle)\ **Replies:** 2\ **Last updated:** [November 27, 2017, 4:31pm UTC](https://discuss.elastic.co/t/problem-installing-x-pack-on-centos-7-virtual-box-vm/109165 "2017-11-27T16:31:19Z")
I have elasticsearch 6 and kibana running on a test machine. It is a virtualbox vm running Centos 7. Everything runs fine until I run the kibana-plugin command to install x-pack. It runs fine until it gets to: Optimiz… --- ## [Elasticsearch throwing error](https://discuss.elastic.co/t/elasticsearch-throwing-error/109246)
**Author:** [@akarsha](https://discuss.elastic.co/u/akarsha)\ **Replies:** 1\ **Last updated:** [November 27, 2017, 4:08pm UTC](https://discuss.elastic.co/t/elasticsearch-throwing-error/109246 "2017-11-27T16:08:59Z")
I am using Elasticsearch 5.1.1 in my VM RedHat 6.8 Santiago. While trying to run elastic search, it is giving me below exception in the logs: \[2017-11-27T10:51:47,743\]\[ERROR\]\[o.e.b.Bootstrap \] Exception java.l… --- ## [Sort single doc buckets by an aggregation on a nested collection](https://discuss.elastic.co/t/sort-single-doc-buckets-by-an-aggregation-on-a-nested-collection/107365)
**Author:** [@hetzer-fastec](https://discuss.elastic.co/u/hetzer-fastec)\ **Replies:** 3\ **Last updated:** [November 27, 2017, 3:53pm UTC](https://discuss.elastic.co/t/sort-single-doc-buckets-by-an-aggregation-on-a-nested-collection/107365 "2017-11-27T15:53:22Z")
Hi everyone, I am working on data modeling restaurants. A restaurants can have employees (which is a nested array of Employee) and an employee has a profession. The idea behind the following query attempt is to return … --- ## [Weird TCP connection to host6.diocesedesobral100anos.com](https://discuss.elastic.co/t/weird-tcp-connection-to-host6-diocesedesobral100anos-com/109088)
**Author:** [@abbasovalex](https://discuss.elastic.co/u/abbasovalex)\ **Replies:** 5\ **Last updated:** [November 27, 2017, 3:38pm UTC](https://discuss.elastic.co/t/weird-tcp-connection-to-host6-diocesedesobral100anos-com/109088 "2017-11-27T15:38:20Z")
Hello! I need help. When I run lsof -a -p \ then I am seeing next lines: java 22834 elasticsearch 158u IPv6 285317013 0t0 TCP cs24290:vrace-\>host6.diocesedesobral100an… --- ## [Time-series index: query with time-window](https://discuss.elastic.co/t/time-series-index-query-with-time-window/109033)
**Author:** [@cerbi](https://discuss.elastic.co/u/cerbi)\ **Replies:** 2\ **Last updated:** [November 27, 2017, 3:19pm UTC](https://discuss.elastic.co/t/time-series-index-query-with-time-window/109033 "2017-11-27T15:19:11Z")
Hi, I'm using time-series indices with the following pattern: message\_YYYY.MM.DD I'd like to perform queries for documents inside a certain time-window. Something like: GET /{from message\_2017.11.05 to message\_2017.1… --- ## [Source exclude wrong when field is empty](https://discuss.elastic.co/t/source-exclude-wrong-when-field-is-empty/108884)
**Author:** [@Dolgy](https://discuss.elastic.co/u/Dolgy)\ **Replies:** 6\ **Last updated:** [November 27, 2017, 3:02pm UTC](https://discuss.elastic.co/t/source-exclude-wrong-when-field-is-empty/108884 "2017-11-27T15:02:44Z")
Hy, I'm trying to exclude one field from my data and is working wrong on ES 6 Query GET /warehouses/doc/\_search { "query": { "bool": { "must": { "match\_all": {} } } }, "\_source": { … --- ## [Out of memory issue on one node caused cluster failure?](https://discuss.elastic.co/t/out-of-memory-issue-on-one-node-caused-cluster-failure/109207)
**Author:** [@BLZB0B](https://discuss.elastic.co/u/BLZB0B)\ **Replies:** 10\ **Last updated:** [November 27, 2017, 2:48pm UTC](https://discuss.elastic.co/t/out-of-memory-issue-on-one-node-caused-cluster-failure/109207 "2017-11-27T14:48:35Z")
Hi, Came in this morning to find our pre-prod environment has spat out it's dummy over the weekend... just in time for our planned go-live on Thursday! it would appear that we lost one out of three nodes - but the rest… --- ## [Disk space got full cause of error.log and shards are failing to initialize](https://discuss.elastic.co/t/disk-space-got-full-cause-of-error-log-and-shards-are-failing-to-initialize/108895)
**Author:** [@Kostas](https://discuss.elastic.co/u/Kostas)\ **Replies:** 6\ **Last updated:** [November 27, 2017, 2:46pm UTC](https://discuss.elastic.co/t/disk-space-got-full-cause-of-error-log-and-shards-are-failing-to-initialize/108895 "2017-11-27T14:46:32Z")
I'm new to elastic and i would appreciate any help. I have a problem that lies to the error.log file, which size has become enormous and the shards are failing to initialize. Could you please direct me to the right dire… --- ## [Terms Aggregation with a Script not working](https://discuss.elastic.co/t/terms-aggregation-with-a-script-not-working/109154)
**Author:** [@PRussell](https://discuss.elastic.co/u/PRussell)\ **Replies:** 2\ **Last updated:** [November 27, 2017, 2:30pm UTC](https://discuss.elastic.co/t/terms-aggregation-with-a-script-not-working/109154 "2017-11-27T14:30:14Z")
In the ES doc under Terms Aggregations, it gives the following on using a script to generate terms for Aggregations: Generating the terms using a script: GET /\_search { "aggs" : { "genres" : { "terms" : { "script"… --- ## [Delete all indexes](https://discuss.elastic.co/t/delete-all-indexes/109226)
**Author:** [@Deus](https://discuss.elastic.co/u/Deus)\ **Replies:** 2\ **Last updated:** [November 27, 2017, 2:00pm UTC](https://discuss.elastic.co/t/delete-all-indexes/109226 "2017-11-27T14:00:54Z")
After deleting ALL indexes, all documents deleted too and can't be restored? I know about Reindex API, nut it just copies documents from one index to another. --- ## [Monitoring: Elastic Data Nodes - System Load](https://discuss.elastic.co/t/monitoring-elastic-data-nodes-system-load/109095)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [November 27, 2017, 1:55pm UTC](https://discuss.elastic.co/t/monitoring-elastic-data-nodes-system-load/109095 "2017-11-27T13:55:26Z")
Would like to know the acceptable System Load metrics for elasticsearch data node which is between 0.5 to 3. --- ## [Painless support for URI encoding](https://discuss.elastic.co/t/painless-support-for-uri-encoding/108901)
**Author:** [@Ryan\_Grannell](https://discuss.elastic.co/u/Ryan_Grannell)\ **Replies:** 2\ **Last updated:** [November 27, 2017, 1:52pm UTC](https://discuss.elastic.co/t/painless-support-for-uri-encoding/108901 "2017-11-27T13:52:00Z")
Hi, I wasn't sure where to post this, since it's specific to the painless language, but given that I'm using thing from Alerting I figured this was the appropriate category. I'm trying to URLencode a string, which shou… --- ## [Help! After upgrading to Elasticsearch 6 cluster shard replicas will not allocate](https://discuss.elastic.co/t/help-after-upgrading-to-elasticsearch-6-cluster-shard-replicas-will-not-allocate/108077)
**Author:** [@Warren\_Turner](https://discuss.elastic.co/u/Warren_Turner)\ **Replies:** 8\ **Last updated:** [November 27, 2017, 1:32pm UTC](https://discuss.elastic.co/t/help-after-upgrading-to-elasticsearch-6-cluster-shard-replicas-will-not-allocate/108077 "2017-11-27T13:32:10Z")
I upgraded my cluster to Elasticsearch 6 and while it is working, none of the redundant shards are being allocated :frowning: When I use the explain API I get this: curl -XGET 'localhost:9200/\_cluster/allocation/explai… --- ## [Elasticsearch 5.5.1 term aggregations doc-count is error](https://discuss.elastic.co/t/elasticsearch-5-5-1-term-aggregations-doc-count-is-error/109221)
**Author:** [@whybangbang](https://discuss.elastic.co/u/whybangbang)\ **Replies:** 0\ **Last updated:** [November 27, 2017, 1:00pm UTC](https://discuss.elastic.co/t/elasticsearch-5-5-1-term-aggregations-doc-count-is-error/109221 "2017-11-27T13:00:45Z")
when we search a number field ,result total\_count is 312, but when agg the doc-count is 92, i don't know the reason --- ## [Getting number of childrens in the query when searching for parent?](https://discuss.elastic.co/t/getting-number-of-childrens-in-the-query-when-searching-for-parent/109217)
**Author:** [@jalaj](https://discuss.elastic.co/u/jalaj)\ **Replies:** 0\ **Last updated:** [November 27, 2017, 12:47pm UTC](https://discuss.elastic.co/t/getting-number-of-childrens-in-the-query-when-searching-for-parent/109217 "2017-11-27T12:47:27Z")
Hi, I have indexed some data using in user index PUT userstest { "settings": { "analysis": { "analyzer": { "custom\_lowercase": { "tokenizer": "whitespace", "filter": \[ … --- ## [Error when Reindex from 2.4.6 to 5.x (enabled) - Reindex helper](https://discuss.elastic.co/t/error-when-reindex-from-2-4-6-to-5-x-enabled-reindex-helper/108996)
**Author:** [@juanito](https://discuss.elastic.co/u/juanito)\ **Replies:** 4\ **Last updated:** [November 27, 2017, 12:40pm UTC](https://discuss.elastic.co/t/error-when-reindex-from-2-4-6-to-5-x-enabled-reindex-helper/108996 "2017-11-27T12:40:34Z")
Hi I am migrating from 2.4.6 to 5.x, and I am using the migration tool (https://github.com/elastic/elasticsearch-migration/tree/2.x), but when i using the Reindex Helper, its throw a error, see below: “PUT http://local… --- ## [Xpack and Logstas: Elasticsearch Unreachable: \[http://localhost:9200/\]](https://discuss.elastic.co/t/xpack-and-logstas-elasticsearch-unreachable-http-localhost-9200/109048)
**Author:** [@saad](https://discuss.elastic.co/u/saad)\ **Replies:** 6\ **Last updated:** [November 27, 2017, 12:24pm UTC](https://discuss.elastic.co/t/xpack-and-logstas-elasticsearch-unreachable-http-localhost-9200/109048 "2017-11-27T12:24:15Z")
Hi I installed x-pack on logstash. logstash was running successfully before x-pack. After installation of x-pack, I disable seucirty in elasticseach and logstash by using below command in .yml file xpack.security.enabl… --- ## [Cluster goes yellow a few times during the night](https://discuss.elastic.co/t/cluster-goes-yellow-a-few-times-during-the-night/108972)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 10\ **Last updated:** [November 27, 2017, 12:02pm UTC](https://discuss.elastic.co/t/cluster-goes-yellow-a-few-times-during-the-night/108972 "2017-11-27T12:02:30Z")
Hi, my elasticsearch cluster goes yellow every once in awhile during the night. It is because it starts to put the shards on the other nodes. Can I do anything to prevent my cluster from going yellow? \[2017-11-24T03:08… --- ## [Prioritize search requests over index requests](https://discuss.elastic.co/t/prioritize-search-requests-over-index-requests/109201)
**Author:** [@aslamy](https://discuss.elastic.co/u/aslamy)\ **Replies:** 4\ **Last updated:** [November 27, 2017, 11:20am UTC](https://discuss.elastic.co/t/prioritize-search-requests-over-index-requests/109201 "2017-11-27T11:20:57Z")
How can I force elasticsearch to always take care of search requests first then index requests. [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1874) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1876)